CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
SentinelOne
Mount Here, Read There: Twin Path Traversal CVEs in Kubernetes Storage
filepath.Join was never designed to be a security boundary. We found two CSI drivers that shipped on the assumption it was, and the result was cross-tenant data access with optional node destruction, ...
-
security.nl
Nieuw Linux-lek kan lokale aanvaller root maken op systemen met XFS
Onderzoekers waarschuwen voor een nieuwe kwetsbaarheid in de Linux-kernel waardoor een lokale aanvaller root kan worden op systemen met een XFS-bestandssysteem. Miljoenen systemen lopen mogelijk risic ...
-
The Hacker News
China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Lati ...
-
The Hacker News
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager ...
-
security.nl
Grootschalig misbruik van kritiek Microsoft SharePoint-lek verwacht
Onderzoekers verwachten dat een kritieke kwetsbaarheid in Microsoft SharePoint, waardoor een ongeauthenticeerde aanvaller code op kwetsbare servers kan uitvoeren, op grote schaal zal worden misbruikt. ...
-
The Hacker News
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Q ...
-
security.nl
Check Point waarschuwt voor actief misbruik van kritiek SmartConsole-lek
Cybersecuritybedrijf Check Point waarschuwt voor actief misbruik van een kritieke kwetsbaarheid waardoor aanvallers via SmartConsole als admin op een beveiligingsoplossing van het bedrijf kunnen inlog ...
-
The Cyber Express
Oracle July 2026 Patch Fixes 1,434 CVEs Across 334 Products
Oracle has released its July 2026 Critical Patch Update, delivering one of its largest quarterly security releases to date. The latest Oracle security patch addresses more than 1,400 vulnerabilities a ...
-
The Hacker News
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under a ...
-
The Hacker News
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete c ...